Cleanup doc

This commit is contained in:
Eric Fontana
2014-09-12 12:25:57 -04:00
parent 81d57db90d
commit e15ded5405
2 changed files with 7 additions and 12 deletions

View File

@@ -68,8 +68,6 @@ namespace TimberWinR.UnitTests
// 4 fields, Email, Active, CreatedDate, Roles
Assert.AreEqual(4, stuff.Count);
// Now, merge it into the root (starts as 3 fields, ends up with 7 fields)
Assert.AreEqual(3, jsonInputLine2.Count);
c = Configuration.FromString(jsonFilterNoTarget);
@@ -77,10 +75,7 @@ namespace TimberWinR.UnitTests
Assert.IsTrue(jf.Apply(jsonInputLine2));
JObject nostuff = jsonInputLine2["stuff"] as JObject;
Assert.IsNull(nostuff);
Assert.AreEqual(7, jsonInputLine2.Count);
var o1 = jsonInputLine1.ToString();
var o2 = jsonInputLine2.ToString();
Assert.AreEqual(7, jsonInputLine2.Count);
}
}
}

View File

@@ -7,8 +7,8 @@ The following operations are allowed when mutating a field.
| Operation | Type | Description
| :---------------|:----------------|:-----------------------------------------------------------------------|
| *type* | property:string |Type to which this filter applyes, if empty, applies to all types.
| *condition* | property:string |C# expression
| *type* | property:string |Type to which this filter applies, if empty, applies to all types.
| *condition* | property:string |C# expression, if the expression is true, continue, otherwise, ignore
| *source* | property:string |Required field indicates which field contains the Json to be parsed
| *target* | property:string |If suppled, the parsed json will be contained underneath a propery named *target*
| *add_field* | property:array |If the filter is successful, add an arbitrary field to this event. Field names can be dynamic and include parts of the event using the %{field} syntax. This property must be specified in pairs.
@@ -74,7 +74,7 @@ The fields must be in pairs with fieldName first and value second.
```json
"Filters": [
{
"grok": {
"json": {
"add_field": [
"ComputerName", "Host",
"Username", "%{SID}"
@@ -89,7 +89,7 @@ Remove the fields. More than one field can be specified at a time.
```json
"Filters": [
{
"grok": {
"json": {
"remove_tag": [
"static_tag1",
"Computer_%{Host}"
@@ -105,7 +105,7 @@ Adds the tag(s) to the tag array.
```json
"Filters": [
{
"grok": {
"json": {
"add_tag": [
"foo_%{Host}",
"static_tag1"
@@ -120,7 +120,7 @@ Remove the tag(s) to the tag array. More than one tag can be specified at a tim
```json
"Filters": [
{
"grok": {
"json": {
"remove_tag": [
"static_tag1",
"Username"